验证另一个网站的访问权限?
我有许多网站被要求针对另一个网站的登录进行身份验证。
有人知道如何实现这一目标或有解决此类问题的经验吗?
我最初的想法是网络服务。但如何实现这是我的问题?我可能在多个位置使用多种编程语言构建了多个网站。
最初我将专门使用 ASP.NET 站点,因此任何有关如何添加全局 Web 服务安全检查的建议将不胜感激!我可以在这些情况下编辑代码,但我希望我能将其保持在最低限度。可能只是全局文件或应用程序启动时的几行。
I have a number of sites that I have been asked to authenticate against the login of another site.
Would anyone have any idea how to achieve this or have experience solving such a problem.
My initial thought was a web service. But how to implement this is my question? I may have multiple websites built with multiple programming languages in multiple locations.
Initially I will be working with asp.net sites exclusively so any advice on how to add a global web service security check would be appreciated! I can edit the code in these instances but I was hoping I could keep this minimal. Possibly just a few lines to a global file or on application start.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
您指的是联合身份验证,其中应用程序(依赖方)允许受信任的身份验证服务(身份提供者)代表其对用户进行身份验证。
阅读Windows Identity Foundation;这是开始联合身份验证最简单的地方,尤其是 MVC。
WIF 可用于将您的应用程序与身份提供程序(例如 Windows Live ID)集成,只需少量配置。如果您愿意,您还可以构建自己的自定义身份提供商。
不要试图自己重新发明轮子。实施联合身份验证有既定的标准。
You're referring to Federated Authentication, where an application (the Relying Party) permits a trusted authentication service (the Identity Provider) to authenticate users on its behalf.
Read up on Windows Identity Foundation; it's the easiest place to start with federated authentication, particularly with MVC.
WIF can be used to integrate your application with an Identity Provider (such as Windows Live ID) with just a small amount of configuration. You can also build your own, custom Identity Provider if you wish.
Don't try to reinvent the wheel by doing this yourself. There are established standards for implementing Federated Authentication.